Login Server Release 1.8.5 & UAA Release 1.8.3 - Take 2

- Login Server Release 1.8.5
- UAA Release 1.8.3
- Ability to specify multiple SAML providers in manifest
- Deprecate uaa.login.client_secret - but still be backwards compatible
- Ability to override default user scopes through manifest
- Make login client redirect-uri be based on the login.protocol property
- Upgrade to Apache Tomcat 7.0.55 for both UAA and Login Server jobs


Logic for how we handle `uaa.login.client_secret` and `uaa.clients.login.secret`
This is replicated in both uaa.yml.erb and login.yml.erb so that both the Login Server and the UAA receive the same value.